Hi Guys,I am going to migrate my ACS to ISE for TACACS service but with different configuration although I need to migrate the user database in ACS to ISE.Is it possible to export the users in ACS via CSV then import it in ISE? Will the current usern...
This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Forum Posts
Resolved! ISE 3 Seeing non RADIUS Active Endpoints
We have a strange scenario on our ISE 3 deployment. We have a single WLAN for clients authenticating to ISE with EAP-TLS via a 5520 WLC on v8.2. The WLAN has the ISE deployment as the Authentication and Accounting servers. We have 10 other WLANS that...
Dear All, Does anyone know how often Cisco update the predefined Windows update compound posture conditions?To be more specific:1. Windows released the KB5003174 on May 11, 20212. It was installed on my client 2 days later, on May 13, 20213. The post...
hi Gents, i will need to add 60 X F5 devices TACACS licenses to Cisco ISE 2.4 without using smart licensing. how can i accomplish this ? any part number available for this ?
I have already had TAC migrate licenses from traditional to Smart Licensing. Should I enable Smart licensing during a maintenance window? Are there any risks with changing the licensing from Traditional to Smart?
Dear Community, I tried to deploy Cisco ISE node 2.7 version as VM in my network using OVA file. The deployment is getting installed without any error. However whenever Cisco ISE Node is getting reboot Application Server stuck in 'Initializing' state...
Hello.The ISE Health Checks shows warning on certificates which don't exist inside the GUI, on the list of issued Certificate Authority Certificates.Where they come from and why the database the ISE Health Checks is not the same as the GUI shows? Men...
Resolved! Wired Domain Computer/User login taking to long to get to dot1x authentication success status.
Dear community, I have configured Wired 802.1x EAP-TLS and configuration is giving successful AuthC and AuthZ, however the issue is with the time it is taking to Authenticate and Authorize the NIC Card of the supplicant. When log out and then login...
Hello guys, ASA Version 9.12(3)12Am Re-configuring a used ASA and am managing it remotely, i have configured a local ssh user. username xxx password ***** pbkdf2 but when trying to access it gives me the follwoing output: ssh_exchange_identification:...
Resolved! CTS-enabled C9500 ignores ISE' CoAs
GentsC9500 runs 16.12.4. switch CTS&CoA enabled:CTS Environment Data====================Current state = COMPLETELast status = SuccessfulLocal Device SGT:SGT tag = 2-00:SGT_CTS_DEVICEServer List Info:Installed list: CTSServerList1-0006, 3 server(s):*S...
Hello We plan to place OCSP responder behind HA Proxy.Is it possible to configure ISE to send ocsp requests to a specific TCP port for example 888?In OCSP ProfileURL http://test.domai.com:888/ocsp Has anyone tested it this way?
We are facing this issue on multiple windows endpoints. If we login with domain user, the posture scan gets stuck at 10%. Posture conditions are in Audit mode . But, when we login with local user or admin user on same machine, we are able to complete...
All,How can I configure my Cisco 837 router to log to syslog all successful and failed login attempts to the router via any interface? I'd like to get as much verbose information about the login attempts (success and failed) as possible including so...
We have Cisco ISE 2.2 patch 15 and want to create some read only accounts. The user must be able to see all the configs and other data but should not be able to modify anything. I read somewhere that this feature was introduced from version 2.3. Can ...
I have 5 external identity stores. I have the domain "x.com" but i want for autentification choose the local server and not the remote server that is in another country, because i see some latency for AD queries for remote server.I read that I can do...
